Identifying and Controlling Personal Data